Irsh rail operator website has been compromised and the attackers replaces the original websites files with a ransom note demanding to pay 1 bitcoin with 5 days.
Users who tried reaching the tram operator website last Tuesday saw a message claiming the website has been hacked and the company has taken the website down. Users are advised not to reach the website.
It appears more than 3,226 user records has been compromised in the cyber attack. The records are associated with the users who signed up to a Luas newsletter.
The ransom note displayed as follows
You are hacked
some time ago i wrote that you have serious security holes
you didn't reply
the next time someone talks to you, press the reply button
you must pay 1 bitcoin in 5 days
otherwise I will publish all data and send emails to your users
btc address: 3FsR4CTUmumBJK12Zk8QRwdpPTJEY11aSX
Luas confirmed no financial information has been compromised, and the company to contact the affected users within 24 hours.
Luas announced that website has been compromised and the malicious message added to the homepage of the website. We currently have technicians working on the issue.
The site is being analyzed to identify how the attack occurred and technicians are working to restore the service for the customer. Luas transportation was not affected by the attack.
The Attacker said he reported to tram operator about the security holes in the website, and the attack appears to be a defacement attack.
Luas said that they will update customers via twitter, Facebook, AA Roadwatch and the media if there are any changes to services.
You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.
15,779 Indian Websites Hacked During This Year (Jan – Nov) – CERT-India
3000 Hacked Websites Access comes to Sale in Russian Underground Dark Web Marketplace
Indian Hackers Group Hacked & Encrypt Pakistan Website Files Using KCW Ransomware
Several high-severity vulnerabilities have been identified in Android and Google Pixel devices, exposing millions of…
Phishing attackers used Google Docs to deliver malicious links, bypassing security measures and redirecting victims…
The Python-based NodeStealer, a sophisticated info-stealer, has evolved to target new information and employ advanced…
A significant XSS vulnerability was recently uncovered in Microsoft’s Bing.com, potentially allowing attackers to execute…
Meta has announced the removal of over 2 million accounts connected to malicious activities, including…
Critical security vulnerability has been identified in Veritas Enterprise Vault, a widely-used archiving and content…